$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft File: RbGOIJ7P3aXO14z52YENYR5tQSQ.mft (raw, json) Hash identifier: 7fbk33l238CUfqeYIyRwWMxdgfbSsd0m7VVk1Jxjs00= Subject key identifier: 12:0A:69:8E:BD:7B:F8:A6:FD:C1:AF:BB:FD:12:D6:E8:9C:EF:4D:81 Authority key identifier: 45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24 Certificate issuer: /CN=A9113BB0/serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft Manifest number: 43 Signing time: Wed 17 Sep 2025 08:12:23 +0000 Manifest this update: Wed 17 Sep 2025 08:12:22 +0000 Manifest next update: Wed 24 Sep 2025 08:12:22 +0000 Files and hashes: 1: RbGOIJ7P3aXO14z52YENYR5tQSQ.crl (hash: n3fBFypLBhWQ7CZoyANlLKgYPfFVb7bB9r3Xq7FGfag=) 2: C100F8FE385D11F0B165166CC4F9AE02.roa (hash: X4yO+2uZWy3hhNHPg2Botaoo1uuwNwgNw2Z5oY+nYVw=) 3: 0B5EA7DA323B11F0A65FFB36C4F9AE02.roa (hash: Q/Q2sUKmgFU8L5pYFoikcLW7y4sJztj/yUCaAVnv9mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BB0, serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124 Validity Not Before: Sep 17 08:12:22 2025 GMT Not After : Sep 24 08:12:22 2025 GMT Subject: CN=68ca6d66-509c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2b:bd:93:cb:0b:d2:4f:e0:83:1a:34:ee:1b: 2d:41:56:e7:19:cd:b3:19:f7:cd:60:5f:e4:86:f2: cb:8a:b1:81:98:9a:b3:de:8f:6b:67:b6:8b:72:ba: 42:96:5b:d2:17:1d:1a:6f:94:4a:6b:e9:dd:51:0b: e8:9a:fc:1b:46:03:6c:50:79:46:ab:18:e5:51:15: c7:3b:b7:d2:eb:35:57:3a:b0:9c:b9:84:eb:5e:d8: 4b:c2:84:1d:8e:d0:d4:47:8f:32:b7:bb:dc:82:39: 30:90:0d:af:0f:4d:c2:8b:d8:d6:48:ff:c1:79:0f: 1a:2a:88:45:85:47:0d:02:8d:7c:e6:2e:ab:25:68: 2c:a5:c0:f9:06:35:1f:80:75:cc:7c:e9:7e:62:40: 80:03:0c:15:3e:2d:1d:a1:e8:92:ab:dc:12:ef:3d: db:77:63:48:05:76:77:86:53:bc:6d:35:a1:3e:5c: 5e:9d:0b:b6:fc:d9:7d:16:a3:a3:c9:f0:55:b3:1a: 3f:1e:8c:46:2f:b2:f1:bf:84:6f:68:35:8a:57:2f: af:08:26:c1:38:80:05:7a:cb:19:00:8d:1a:39:ee: 4b:fe:3f:dc:86:3a:56:d5:57:42:5a:f2:e1:84:a4: 12:83:ff:11:4d:11:bd:7c:35:ff:cb:c9:3c:7a:81: 49:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0A:69:8E:BD:7B:F8:A6:FD:C1:AF:BB:FD:12:D6:E8:9C:EF:4D:81 X509v3 Authority Key Identifier: keyid:45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:8b:92:f2:10:ef:96:c5:d9:f8:16:73:a4:19:d9:f7:c7:b0: 20:c4:c1:f4:bb:ed:8c:f9:31:13:ee:61:ea:8a:39:53:a6:d8: c8:57:98:7a:1c:9e:97:b9:52:f8:9f:b6:29:bd:77:f6:10:bb: fe:cb:2c:d5:8d:f5:a2:b5:e9:35:2e:b0:7d:ba:12:23:84:49: f1:79:ac:18:7c:5b:59:bc:08:06:9a:3a:8c:0b:4e:7f:0c:a4: 7c:4a:f7:f8:89:b3:44:fc:79:02:a4:db:9c:60:6d:51:e5:a3: 51:42:56:7d:44:1a:54:a2:83:1c:39:2d:12:da:4a:d7:e4:9c: b9:58:bc:24:12:c8:1d:15:14:c9:c3:df:a9:a8:b0:e5:59:c6: 82:dc:78:15:b5:ff:b3:03:44:e6:f3:fc:56:96:b7:d5:4e:7e: da:3e:cb:b8:28:1f:4e:f4:71:c2:4f:66:5f:4c:fe:f2:68:68: fe:3c:db:da:51:16:32:db:ca:7e:c9:4d:50:5a:ef:28:2a:a0: cf:c1:1a:2a:5b:11:f8:59:3f:62:6d:83:27:7a:29:3e:c5:3c: 19:ea:cc:db:fa:0d:59:84:d0:3e:47:85:22:94:33:0e:f3:63: 98:cc:44:4e:b3:81:f5:95:3f:16:9c:65:36:b9:30:c0:23:ba: 87:38:6e:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0JCMDExMC8GA1UEBRMoNDVCMThFMjA5RUNGRERBNUNFRDc4Q0Y5RDk4MTBENjEx RTZENDEyNDAeFw0yNTA5MTcwODEyMjJaFw0yNTA5MjQwODEyMjJaMBgxFjAUBgNV BAMTDTY4Y2E2ZDY2LTUwOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrK72TywvST+CDGjTuGy1BVucZzbMZ981gX+SG8suKsYGYmrPej2tntotyukKW W9IXHRpvlEpr6d1RC+ia/BtGA2xQeUarGOVRFcc7t9LrNVc6sJy5hOte2EvChB2O 0NRHjzK3u9yCOTCQDa8PTcKL2NZI/8F5DxoqiEWFRw0CjXzmLqslaCylwPkGNR+A dcx86X5iQIADDBU+LR2h6JKr3BLvPdt3Y0gFdneGU7xtNaE+XF6dC7b82X0Wo6PJ 8FWzGj8ejEYvsvG/hG9oNYpXL68IJsE4gAV6yxkAjRo57kv+P9yGOlbVV0Ja8uGE pBKD/xFNEb18Nf/LyTx6gUmxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEgppjr17 +Kb9wa+7/RLW6JzvTYEwHwYDVR0jBBgwFoAURbGOIJ7P3aXO14z52YENYR5tQSQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQkIwLzlGRkRBQjc2MzIz QTExRjBCRjlFMUQzNkM0RjlBRTAyL1JiR09JSjdQM2FYTzE0ejUyWUVOWVI1dFFT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUmJHT0lKN1AzYVhPMTR6NTJZRU5ZUjV0UVNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QkIwLzlGRkRBQjc2MzIzQTExRjBCRjlFMUQzNkM0RjlBRTAyL1JiR09JSjdQM2FY TzE0ejUyWUVOWVI1dFFTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACCLkvIQ75bF2fgWc6QZ2ffHsCDEwfS77Yz5MRPuYeqKOVOm2MhXmHoc npe5Uviftim9d/YQu/7LLNWN9aK16TUusH26EiOESfF5rBh8W1m8CAaaOowLTn8M pHxK9/iJs0T8eQKk25xgbVHlo1FCVn1EGlSigxw5LRLaStfknLlYvCQSyB0VFMnD 36mosOVZxoLceBW1/7MDRObz/FaWt9VOfto+y7goH070ccJPZl9M/vJoaP4829pR FjLbyn7JTVBa7ygqoM/BGipbEfhZP2Jtgyd6KT7FPBnqzNv6DVmE0D5HhSKUMw7z Y5jMRE6zgfWVPxacZTa5MMAjuoc4bj8= -----END CERTIFICATE-----Generated at Thu Sep 18 19:13:26 2025 by rpki-client